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FINAL ACTION 

1 . Amendment C, received on 23 October 2009, has been entered into record. 

2. Claims 1 , 3-5, 7-1 7, 1 9, 21 -24, and 27-30 are presented for examination. 

Response to Arguments 

3. Applicant's arguments filed 23 October 2009 have been fully considered but they 
are not persuasive. 

As to claims 1,3-5, 7-9, 1 3, 1 5-1 7, 1 9, 21-24, and 27-29, it is argued by the 
applicant that Brandys does not teach or suggest a combination with Home and that 
Home does not teach or suggest a combination with Brandys. The applicant also 
argues that Brandys does not disclose protecting or otherwise storing multiple 
generated keys (e.g. keys for each recipient). The examiner respectfully disagrees. 
Brandys discloses that public and private keys are generated on the secure device in 
conjunction with the biometric information (page 2, lines 30-31) and that the private key 
is stored in the smart card (page 4, lines 2-3). Since biometric information is unique to 
each user, separate keys are generated and stored for each user (i.e. multiple keys), 
thus providing motivation for the combination. 

Further, as to claims 1, 3-5, 7-9, 13, 15-17, 19, 21-24, and 27-29, it is argued by 
the applicant that Home does not teach or suggest a combination with Montenegro and 
that Montenegro does not teach or suggest a combination with Home. The applicant 
also argues that requiring every viewer to perform authentication would render Home 
unsatisfactory for its intended purpose. The examiner respectfully disagrees. Home 
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discloses that each receiver node has a unique individual key (col. 4, lines 28-30) and 
that a direct broadcast satellite network requires security in order to broadcast signals to 
paying subscribers (col. 1, lines 28-30) using the receiver nodes' keys. Therefore, 
Home's direct broadcast satellite system discloses performing authentication for each 
receiver node, and Montenegro would not render Home unsatisfactory. 

As to claim 1, it is argued by the applicant that Montenegro does not describe 
that the device that receives the CBID sends a digital signature to the device that sent 
the CBID. The examiner respectfully disagrees. Montenegro discloses that device (i.e. 
portable data storage device) receives one or more reply messages from other devices, 
where the reply messages are signed with the private keys (352, Figure 3B) and that 
the response messages include a digital signature of the entire message (i.e. requested 
data) based on the private key (i.e. generated key) (col. 5, lines 28-30). Montenegro 
also discloses that the requesting device (i.e. portable data storage device) verifies that 
the responding device is not simply replaying an intercepted message that was signed 
with the private key (i.e. correctly received) (col. 5, lines 34-37). It is noted that the 
examiner has interpreted verifying that the requested data has been correctly received 
as including receiving data from a proper source. 

In response to applicant's argument that the examiner's conclusion of 
obviousness is based upon improper hindsight reasoning, it must be recognized that 
any judgment on obviousness is in a sense necessarily a reconstruction based upon 
hindsight reasoning. But so long as it takes into account only knowledge which was 
within the level of ordinary skill at the time the claimed invention was made, and does 
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not include knowledge gleaned only from the applicant's disclosure, such a 
reconstruction is proper. See In re McLaughlin, 443 F.2d 1392, 170 USPQ 209 (CCPA 
1971). 

Information Disclosure Statement 

4. The information disclosure statement (IDS) submitted on 23 October 2009 is 
being considered by the examiner. 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 1, 3-5, 7-9, 13, 15-17, 19, 21-24, and 27-29 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Brandys (WO 02/073877 A2) in view of Home (US 
Patent 4,887,296) and further in view of Montenegro et al. (US Patent 7,434,051 B1 and 
Montenegro hereinafter). 

As to claims 1 and 16, Brandys discloses a system and method for authenticating users 
and data, the system and method having: 

a portable data storage device including a non-volatile memory to 
store data (page 7, lines 8-12); 
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an interface section to receive data from and transmit data to a host 
(page 4, lines 3-4); 

a master control unit to transfer data to and from the non-volatile 
memory (page 4, lines 2-3; page 10, lines 25-26); 

integrated circuit for generating at least one key (page 4, lines 1-2); 

a host computer, the host computer being arranged to transmit a 
command to the portable data storage device using the interface section to 
request the data (page 4, lines 17-18). 
Brandys fails to specifically disclose: 

the portable data storage device being arranged, upon receiving the 
command from the host requesting the data stored in the non-volatile 
memory, the data stored prior to receiving the command, to generate the at 
least one key, to encrypt the generated key using a secret key that is 
permanently stored in the portable storage device and to transmit the 
encrypted key and the requested data stored in the non-volatile memory to 
the host using the interface section, wherein the secret key is permanently 
stored within the portable storage device prior to the generating at least 
one key, 

wherein the portable data storage device is further arranged to 
receive from the host a digital signature based on the generated key and 
the requested data transmitted to the host from the portable storage 
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device, the portable storage device, based on the digital signature, to verify 
that the requested data has been correctly received by the host. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys, as taught by Home. 
Home discloses a system and method for a three key cryptographic system for direct 
broadcast satellite system, the system and method having: 

the portable data storage device being arranged, upon receiving the 
command from the host requesting the data stored in the non-volatile 
memory, the data stored prior to receiving the command, to generate the at 
least one key (i.e. subscriber unit signature key), to encrypt the generated key 
using a secret key (i.e. master factory key) that is permanently stored in the 
portable storage device (col. 7, lines 57-62) and to transmit the encrypted 
key and the requested data (i.e. data stream) stored in the non-volatile 
memory to the host using the interface section, wherein the secret key is 
permanently stored within the portable storage device prior to the 
generating at least one key (col. 7, lines 23-29; col. 8, lines 23-31). 
Given the teaching of Home, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys with the teachings of Home by creating a key in order to verify 
a digital signature. Home recites motivation by disclosing that protecting a different key 
for each subscriber unit is burdensome and encrypting unit keys with a master key 
requires only a single master factory key to be protected (col. 7, lines 12-17). It is 
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obvious that the teachings of Home would have improved the teachings of Brandys by 
using a master key to encrypt generated keys in order to require only a single key to be 
protected instead of multiple generated keys. 

Brandys in view of Home fails to specifically disclose: 

wherein the portable data storage device is further arranged to 
receive from the host a digital signature based on the generated key and 
the requested data transmitted to the host from the portable storage 
device, the portable storage device, based on the digital signature, to verify 
that the requested data has been correctly received by the host. 

Nonetheless, this feature is well known in the art and would have been an obvious 

modification of the teachings disclosed by Brandys in view of Home, as taught by 

Montenegro. 

Montenegro discloses a system and method for facilitating secure cocktail effect 

authentication, the system and method having: 

wherein the portable data storage device is further arranged to 
receive from the host a digital signature based on the generated key and 
the requested data transmitted to the host from the portable storage 
device, the portable storage device, based on the digital signature, to verify 
that the requested data has been correctly received by the host (col. 5, lines 
28-37). 
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Given the teaching of Montenegro, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Brandys in view of Home with the teachings of Montenegro 
by verifying a received signature based on a key and data. Montenegro recites 
motivation by disclosing that using a signature generated by received information allows 
for a requesting device to verify that a responding device is not simply replaying an 
intercepted message and that the message is legitimate (col. 5, lines 34-37). It is 
obvious that the teachings Montenegro would have improved the teachings of Brandys 
in view of Home by verifying a received signature based on a key and data in order to 
allow a device to verify that the message is legitimate and has not been intercepted. 

As to claim 19, Brandys discloses: 

the portable data storage device generating at least one key (page 4, 
lines 1-2); 

the portable data storage device obtaining the requested data from 
the non-volatile memory and the portable data storage device transmitting 
to the host the requested data and the encrypted key (page 3, line 35; page 
4, lines 1-4, 17-23); 

the host decrypting the encrypted key using the secret key 
permanently stored in the host (page 6, line 18). The examiner asserts that it 
would have been well known to one of ordinary skill in the art at the time the 
invention was made to use either symmetric keys, where the same key is used 
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from encryption and decryption, or asymmetric keys for encryption/decryption 
because they are functionally equivalent. 

the host generating a digital signature based on the decrypted key 
and the requested data (page 6, lines 19-21). 
Brandys fails to specifically disclose: 

the portable data storage device receiving and instruction from the 
host requesting the data stored in a non-volatile memory of the portable 
data storage device, wherein the data is stored prior to receiving the 
instruction; 

the portable data storage device encrypting the generated key using 
the secret key permanently stored in the portable data storage device, 
wherein the secret key is permanently stored within the portable storage 
device prior to the generating at least one key; 

the host transmitting the digital signature from the host to the 
portable data storage device; 

the portable data storage device using the digital signature to verify 
that the requested data has been correctly received by the host. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys, as taught by Home. 
Home discloses: 

the portable data storage device receiving and instruction from the 
host requesting the data stored in a non-volatile memory of the portable 
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data storage device, wherein the data is stored prior to receiving the 
instruction (col. 5, lines 16-18); 

the portable data storage device encrypting the generated key (i.e. 
subscriber unit signature key) using the secret key (i.e. master factory key) 
permanently stored in the portable data storage device, wherein the secret 
key is permanently stored within the portable storage device prior to the 
generating at least one key (col. 7, lines 23-29; col. 8, lines 23-31). 
Given the teaching of Home, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys with the teachings of Home by creating a key in order to verify 
a digital signature. Please refer to the motivation recited above with respect to claims 1 
and 16 as to why it is obvious to apply the teachings of Home to the teachings of 
Brandys. 

Brandys in view of Home fails to specifically disclose: 

the host transmitting the digital signature from the host to the 
portable data storage device; 

the portable data storage device using the digital signature to verify 
that the requested data has been correctly received by the host. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Home, as taught by 
Montenegro. 
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Montenegro discloses: 

the host transmitting the digital signature from the host to the 
portable data storage device (col. 5, lines 28-31); 

the portable data storage device using the digital signature to verify 
that the requested data has been correctly received by the host (col. 5, lines 
34-37). 

Given the teaching of Montenegro, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Brandys in view of Home with the teachings of Montenegro 
by using a received digital signature for verification. Please refer to the motivation 
recited above with respect to claims 1 and 16 as to why it is obvious to apply the 
teachings of Montenegro to the teachings of Brandys in view of Home. 

As to claims 3 and 22, Brandys discloses: 

wherein the digital signature is produced by hashing the received 
data to generate a hash result, and encrypting the hash result using the 
generated key (page 4, lines 19-23). 
As to claims 4 and 23, Brandys discloses: 

wherein the generated key is the private key of a public key/private 
key pair (page 4, lines 1-3). 
As to claims 5 and 24, Brandys discloses: 
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wherein the verification of the digital signature is performed in the 
portable data storage device using the public key (page 5, line 35). 
As to claims 7 and 27, Brandys discloses: 

wherein the requested data includes both data present in the non- 
volatile memory, and also biometric data obtained from a biometric sensor 
of the portable data storage device (page 2, lines 24-26). 

As to claims 8 and 28, Brandys fails to specifically disclose: 

the requested data is transmitted from the portable data storage 
device to the host in an encrypted form. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys, as taught by Home. 
Home discloses: 

the requested data is transmitted from the portable data storage 
device to the host in an encrypted form (col. 7, lines 23-25). 
Given the teaching of Home, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys with the teachings of Home by transmitting encrypted data. 
Home recites motivation by disclosing that encrypting data using an individualized key 
allows portions of the data to be received only by a particular subscriber unit (col. 7, 
lines 42-45). It is obvious that the teachings of Home would have improved the 
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teachings of Brandys by transmitting encrypted data in order to allow only certain units 
to receive the data. 

As to claims 9 and 29, Brandys discloses: 

a biometric sensor (page 3, lines 14-15); 
a verification engine for granting access to data stored in the 
portable data storage device based on a biometric verification of the user's 
identity by comparison of biometric data received using the biometric 
sensor with pre-stored biometric data (page 2, lines 24-26). 
As to claim 13, Brandys discloses: 

the interface section is for wireless communication with the host 
(page 3, lines 11-12). 
As to claim 15, Brandys discloses: 

a camera for generating image data, and/or a microphone for 
capturing audio data (page 7, lines 19-20), the master control unit being 
arranged to store the image data and/or the audio data in the memory (page 
7, lines 8-12). 
As to claim 17, Brandys discloses: 

wherein the generated key is one key of a public key/private key pair 
(page 4, lines 1-3), and the host is arranged to generate a digital signature 
using the private key and the requested data (page 6, lines 19-21). 
As to claim 21 , Brandys discloses: 
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wherein the host generates the digital signature using the private key 
and the requested data (page 4, lines 19-21). 

7. Claims 10 and 30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Brandys in view of Home and Montenegro as applied to claims 1 and 19 above, 
and further in view of Iwagaki et al. (US 2003/0161468 A1 and Iwagaki hereinafter). 
As to claims 10 and 30, Brandys in view of Home and Montenegro fails to specifically 
disclose: 

a compression algorithm for exploiting any redundancy in data 
received by the portable data storage device to compress it before storing 
it in the non-volatile memory, and a decompression engine to regenerate 
the data before it is transmitted from the portable data storage device. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Home and Montenegro, 
as taught by Iwagaki. 

Iwagaki discloses a system and method for securing a storage device, the system and 
method having: 

a compression algorithm for exploiting any redundancy in data 
received by the portable data storage device to compress it before storing 
it in the non-volatile memory, and a decompression engine to regenerate 
the data before it is transmitted from the portable data storage device 

(0009, lines 13-17). 
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Given the teaching of Iwagaki, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Home and Montenegro with the teachings of 
Iwagaki by providing for compression and decompression of stored data. Iwagaki 
recites motivation by disclosing that data can be very large and storing uncompressed 
data in a storage device does not effectively utilize the storage capacity of the device 
(0009, lines 9-12). It is obvious that the teachings of Iwagaki would have improved the 
teachings of Brandys in view of Home and Montenegro by allowing for the compression 
and decompression of stored data in order to use the storage capacity of the device 
more effectively. 

8. Claims 11,12, and 1 4 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Brandys in view of Home and Montenegro as applied to claim 1 
above, and further in view of Fang (US Patent 6,536,941 B1 ). 

As to claim 1 1 , Brandys in view of Home and Montenegro fails to specifically disclose: 
the interface section includes a USB connector and a USB interface 
device. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Home and Montenegro, 
as taught by Fang. 

Fang discloses a wrist-worn personal flash disk apparatus, the apparatus having: 
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the interface section includes a USB connector and a USB interface 
device (col. 1, lines 37-41). 
Given the teaching of Fang, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Home and Montenegro with the teachings of Fang 
by allowing connectively through USB. Fang recites motivation by disclosing using a 
USB interface allows for easy establishment of a link to a host computer so that data 
can be read or written (col. 1 , lines 38-39). It is obvious that the teachings of Fang 
would have improved the teachings of Brandys in view of Home and Montenegro by 
providing for an interface using USB in order to allow for easy connectivity to a host. 

As to claim 12, Brandys in view of Home and Montenegro fails to specifically disclose: 
the connector is a USB plug integral with the portable data storage 
device. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Home and Montenegro, 
as taught by Fang. 
Fang discloses: 

the connector is a USB plug integral with the portable data storage 
device (col. 1, lines 37-41). 
Given the teaching of Fang, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
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the teachings of Brandys in view of Home and Montenegro with the teachings of Fang 
by providing for a USB connection for the device. Please refer to the motivation recited 
above with respect to claim 11 as to why it is obvious to apply the teachings of Fang to 
the teachings of Brandys in view of Home and Montenegro. 

As to claim 14, Brandys in view of Home and Montenegro fails to specifically disclose: 
a housing, the housing including a narrowed end for use as a 
pointer. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Home and Montenegro, 
as taught by Fang. 
Fang discloses: 

a housing, the housing including a narrowed end for use as a pointer 

(33, Figure 1). 

Given the teaching of Fang, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Home and Montenegro with the teachings of Fang 
by providing for a housing with a narrowed end. Fang recites motivation by disclosing 
that the storage device can have multiple functions depending on the physical shape of 
the device (Abstract, lines 1-14). It is obvious that the teachings of Fang would have 
improved the teachings of Brandys in view of Home and Montenegro by providing for a 
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specific shaped housing, such as a narrowed end, in order to allow for multiple functions 
of the device. 

It is also noted that "for use as a pointer" recites intended use and has been given little 
patentable weight. 

Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Sarah Su/ 

Examiner, Art Unit 2431 

/Christopher A. Revak/ 
Primary Examiner, Art Unit 2431 



